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Abstract 

We present a one sided Monte-Carlo algorithm which constructs a 
long root SL2(g)-subgroup in X/Op{X), where X is a black-box group 
and X/Op{X) is a finite simple group of Lie type defined over a field of 
odd order g = > 3 for some fc ^ 1. Our algorithm is based on the 
analysis of the structure of centralizers of involutions and can be viewed 
as a computational version of Aschbacher's Classical Involution Theorem. 
We also present an algorithm which determines whether the p-core (or 
"unipotent radical") Op{X) of a black-box group X is trivial or not, where 
X/Op{X) is a finite simple classical group of odd characteristic p. This 
answers a well-known question of Babai and Shalev. 

1 Introduction 

Black-box groups were introduced by Babai and Szemeredi as a general- 
ization of permutation and matrix group algorithms in computational group 
theory. A black-box group G is defined to be a group equipped with a 'black 
box' where the group elements are represented as 0-1 strings of uniform length 
N (encoding length) and the 'black box' performs the group operations which 
are multiplication, inversion and decision on whether a string represents a trivial 
element in the group. 

A black-box group G is specified as G = {S) for some set S of elements of 
G and to construct a black-box subgroup means to construct some generators 
for this subgroup. 

If TV is the encoding length of a black-box group G, then we have |G| ^ 2^. 
Therefore, if G is a group of Lie type of rank n defined over a field of size q, 
then |G| > g"', so 0{N) = n^logg. 

A black-box group algorithm is defined to be an algorithm which docs not 
use specific properties of the representation of the given group or particulars 
of how the group operations are performed [47j . There are mainly two types 
of black-box group algorithms: Monte-Carlo and Las Vegas. A Monte-Carlo 
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algorithm is a randomized algorithm which may produce an incorrect output 
with some probability of error e controlled by the user, whereas a Las Vegas 
algorithm never produces an incorrect answer but may report failure where the 
probability of the failure is less than some specified value e. For a thorough 
discussion of randomized algorithms, see [B]. The complexity of a polynomial 
time black-box group algorithm is of the form 0(A^'^ log(l/e)), where N is the 
encoding length and c is a constant. 

An important component of a black-box group algorithm is the construc- 
tion of uniformly distributed random elements in a given group. Although not 
convenient for practical purposes, there is a polynomial time Monte-Carlo algo- 
rithm producing "nearly" uniformly distributed random elements [S|. A more 
practical solution is the "product replacement algorithm" [23] , see also [42j |43] . 

The main goal in this subject is to design efficient recognition algorithms 
of a given group. In [7], Babai and Beals proposed an approach for the con- 
struction of the composition series of black-box groups. The major component 
of this approach is the development of fast recognition algorithms for the finite 
simple groups. The black-box recognition of symmetric and alternating groups 
is presented in [T2j [M], and the Lie type groups arc handled in the papers 
[21 HSl HZl [IHl HB I3S] . The algorithm in [3] computes the standard name of a 
given finite simple black-box group of Lie type whereas the algorithms in j35) 
recognize black-box classical groups constructively, namely, if successful, the al- 
gorithm constructs an isomorphism between the given black-box group and its 
standard copy. However, these constructive recognition algorithms are not poly- 
nomial in the size of the input; their complexity contain a factor of q (the size of 
the field) , whereas N can contain only factors of log q. Later, by assuming a pro- 
cedure for the constructive recognition of SL2(g), polynomial time constructive 
recognition algorithms were obtained in a series of papers [HI [T71 [TSl [12] . 

Another important part of the construction of the composition series is to 
decide whether the p-core (or "unipotcnt radical") Op{X) of a black-box group 
X is trivial or not, where X/Op{X) is a simple group of Lie type of character- 
istic p. It is proved in [TO] that if X/Op{X) is a simple unisingular group of 
Lie type (see Section |S]), then random search in X works effectively to decide 
whether Op{X) is trivial or not. Recall that a finite simple group G of Lie type 
of characteristic p is called unisingular if every nontrivial G-module M of char- 
acteristic p has the property that every element of G has a nonzero fixed point in 
its action on M. The unisingular simple groups of Lie type are classified in [31] 
and they constitute a small list among all simple groups of Lie type. However, 
if X/Op(X) is not unisingular, then the proportion of elements whose orders 
are multiples of p is 0{l/q), where q is the size of the underlying field [TOl |30] . 
Moreover, deciding whether Op{X) is trivial or not is a harder problem [TO] . 

In [5T] , the author proposed and briefly outlined a uniform approach recog- 
nizing black-box groups X where X/Op{X) is a Lie type group of odd charac- 
teristic p. The main idea is to construct all root SL2 ((3')-subgroups in a Lie type 
group corresponding to the nodes in the extended Dynkin diagram of the cor- 
responding algebraic group. The approach is based on recursive construction of 
centralizers of involutions in black box groups [U [TS] [15] . The reader is referred 
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to [nj for a detailed discussion of this approach together with the previous 
algorithms recognizing the black-box groups of Lie type [H [TBI El [HI [HI [35] . 

The object of this paper is to complete the first part of this project, that is, 
to present and justify an algorithm which constructs a subgroup corresponding 
to a long root SL2 ((7)-subgroup in a black-box group X where X/Op{X) is a Lie 
type group of odd characteristic p and decides whether the p-core (or "unipotent 
radical") Op{X) is trivial or not. 

The main result is the following. 

Theorem 1.1 Let X be a black-box group and X = X/Op{X) isomorphic to 
a finite simple group of Lie type defined over a field of odd order q = p^ > i 
for some k ^ 1. Assume that X ^ PSL2(g) and X ^ '^G2{q), then there is 
a polynomial time Monte-Carlo algorithm which constructs a subgroup K such 
that K/Op{K) is a long root 81^2 (q) -subgroup in X. 

If X/Op{X) is a Lie type group defined over a field of odd characteristic p 
with non-trivial center, then Z{X) can be constructed by a polynomial time 
Monte-Carlo algorithm [10] . Therefore the algorithm in Theorem 11.11 can be 
extended to all quasi-simple groups of Lie type over a field of odd order q > 3 
except for X/Op{X) ^ PSL2(g) or ^G2iq). 

In the case of a black-box group X where X = X/Op{X) is isomorphic to 
PSL2(q') or '^G2{q), there is no subgroup in X isomorphic to SL2((j'). Therefore 
we exclude these groups in Theorem ll.il 

In a later publication [52], we extend this algorithm to construct all sub- 
groups K ^ X where K/Op{K) correspond to the root SL2((j')-subgroups ap- 
pearing as a node in the extended Dynkin diagram of X/Op{X). In other words, 
we construct the Curtis-Tits and Phan systems [551 113 HH] for the black-box 
groups of Lie type of odd characteristic p. As discussed in [JTl Section 2] , we 
note here that this approach can be seen as a computational version of As- 
chbacher's "Classical Involution Theorem" [3] which plays a prominent role in 
the classification of the finite simple groups. We also note that this procedure 
is not a constructive recognition algorithm. 

The next result allows us to decide whether a given subgroup is a long root 
SL2 ((7)-subgroup in a finite simple group of Lie type defined over a field of odd 
order q> 2>. 

Theorem 1.2 Let L\ be a black-box subgroup in a finite simple black-box group 
of Lie type defined over a field of odd order q > 3 isomorphic to {V)Slj2{q^) 
for some k ^ 1. Then there is a polynomial time Monte- Carlo algorithm which 
decides whether K is a long root Slj2{q)- subgroup. 

One of the most important applications of Theorem 11.11 is a polynomial 
time Monte-Carlo algorithm which determines whether Op{X) ^ 1 answering a 
well-known question of Babai and Shalev [TU] . We prove the following theorem. 

Theorem 1.3 Let X be a black-box group with the property that X/Op{X) is a 
simple classical group of odd characteristic p. Then there is a polynomial time 
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Monte-Carlo algorithm which decides whether Op{X) ^ 1, and, if Op{X) ^ 1, 
we can find a non-trivial element of Op(X). 

Combining Theorem 11.31 with the results in [TJ [71 [HI we obtain: 

Theorem 1.4 Finite simple classical groups of known odd characteristic can 
be recognized in Monte-Carlo polynomial time among all black-box groups. 

The black-box group operations allows us to work only with the multiplica- 
tion table of the given group. Therefore it is almost impossible, for example, 
in big matrix groups, to get information about the group without an additional 
oracle. One can solve many problems by introducing an order oracle with which 
we can find the orders of elements. In this paper, we do not attempt to find the 
exact orders of elements. Instead we work with a milder assumption that we 
are given a computationally feasible global exponent E for X as an input, that 
is, a reasonably sized natural number E such that = 1 for all x € X. Notice 
that one can set E = \GLn{q)\ for n x n matrix groups. 

The characteristic of the underlying field for the black-box groups of Lie 
type can be computed by using an order oracle [36]. A more recent algorithm 
computing the characteristic, which makes use of an order oracle and the con- 
struction of centralizcrs of involutions, is presented in [38) . In our algorithms 
we assume that the characteristic p of the underlying field is given as an input. 

In this paper we are mainly interested in the case where the order of the 
base field is large. Note that the algorithms also work for groups over small 
fields provided that solvable 2-components do not occur in the centralizers of 
involutions, or cquivalently, that q > 3. However there are better algorithms 
where X/Op{X) can be recognized constructively when the field of definition is 
small [55] . 

The algorithms presented in this paper have been tested extensively in GAP 
on various groups over a variety of fields. The implementation is discussed in 
Section [1] 

2 Background 

In this section, we recall some basic properties of groups of Lie type that we 
use frequently in the present paper. We refer the reader to [HJ [35] [55] for a 
complete description of groups of Lie type. 

Throughout this section we set the following notation. Let G denote a con- 
nected simple algebraic group over an algebraically closed field of characteristic 
p, T a maximal torus of G, B a Borel subgroup containing T and S be the 
corresponding root system. Let N = Nq{T) and W = N/T the Weyl group of 
G. Let fT be a Frobenius endomorphism of G and Ga the fixed point subgroup 
of G under a. The subgroup Ga is finite, and we denote G = [Ga)- 
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2.1 Maximal tori 



It is known that there exists a maximal torus T and Borel subgroup B oi G 
which are cr-invariant and T ^ B, see for example [551 2.1.6]. The subgroup of 
the form GOT for some cr-invariant maximal torus T of G is called a maximal 
torus of G. 

The fundamental result about maximal tori in finite groups of Lie type is 
that the set of G-orbits on the set of cr-invariant maximal tori of G is in bi- 
jective correspondence with H^{a,W) [351 2.1.7], where H^{a,G) is the set of 
equivalence classes of G (or cr-conjugacy class of G) under the relation ^ defined 

by 

X ^ y if and only if y = gxg for some g £ G. (1) 

In particular, if a fixes every element of W, which is the case if G is untwisted, 
then H^{a,W) corresponds to the set of conjugacy classes of W. If a torus 
T ^ G corresponds to a cr-conjugacy class of W containing w, then T is called 
a torus twisted by w. 

The set Gwiw,a) — {x e W \ w — xwx~'^} is a subgroup of W. By [22l 
3.3.6], we have 

\Nal%\^\Gw{w,CT)l (2) 

where N = Nq{T). Hence, we obtain an important result that the sizes of the 
conjugacy classes of tori depend only on the Weyl group. Notice that if G is an 
untwisted group of Lie type, then Gw{w, f) — Gw{w)- 

An element which belongs to a torus is called a semisimple element^ and 
t G G is called regular semisimple if T = CQ{t) is a cr-invariant maximal torus 
of G. 

2.2 Root SL2(g)-subgroups 

For each root r 6 E, there exists a T-root subgroup of G. If T is cr-invariant, 
then the map cr permutes these root subgroups and induces an isometry on the 
Euclidean space MS spanned by S. Let A be a (cr)-orbit of a root subgroup of 
G, then the subgroup {{/S)„) is called a T-root subgroup of G, where T = Ta 
[46] . The root system of the finite group G is obtained by taking the fixed points 
of the isometry induced from cr on MS [551 Section 2.3], and G is generated by 
the corresponding root subgroups. A root subgroup is called a long or short 
root subgroup, if the corresponding root is long or short, respectively. We refer 
the reader to [28l Table 2.4] for a complete description of the structure of the 
root subgroups in finite groups of Lie type. 

Let S = {ri, . . . , r„} and X^-^ , • • • , ^r„ be the corresponding root subgroups. 
Set M, = {Xr,,X^r,), Z, = Z(Xr,) andK, = {Z,,Z^,). Then X^, is a Sylow 
p-subgroup of Mi and Zi is a Sylow p-subgroup of Ki. The subgroup Ki ^ G 
is called long or short root Sh2{q) -subgroup, if the corresponding root G S is 
a long or short, respectively. Here, q is the order of the center of a long root 
subgroup of G. In this case we say that G is defined over a field of order q. 
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Theorem 2.1 ([3J Theorem 14.5]) Let G he a finite simple group of Lie type 
defined over a field of odd order q> ?> different from PSL2((j') and ^G2{q)- With 
the above notation, let ri be a long root, K — Ki, and {z) — Z{K). Then 

(1) K = SL2{q). 

(2) Op'{Ng{K)) = KL, where [K,L] = I and L is the Levi factor of the 
parabolic subgroup NQ{Zi). 

(3) K^Cg{z). 

2.3 The structure of the centralizers of involutions 

In this section we summarize the structure of the ccntrahzers of involutions in 
finite simple groups of Lie type of odd characteristic p in Table [21 which is 
extracted from [28] for the convenience of the reader. We refer the reader to 
[28l §4.5, §4.6] for a complete description. 

We use the following notation in Table [5J For e = ±, we write (P)SL^((7) to 
denote (P)SL„((7) and (P)SU„((?) whene = + and e = — , respectively. Similarly 
El{q) denotes the simple group E^^q), if e +, and ^E^^q), if e = — . Moreover 
we denote the universal version of Eg (q) by Eg (q) which is a central extension 
of the simple group El(q) by an abelian group of order (3, q — e). 

We write Gi o„ G2 which is meant to be (Gi x G2)/N for some cyclic group 
N of order n intersecting with Gi and G2 trivially. 

Let G be a finite group and Z{G) is cyclic. Then we write ^G to denote 
the quotient group G/Y, where Y ^ Z{G) and \Y\ = m. Note that the center 
of G ^ Spin^„(g) is an elementary abelian 2-group of order 4 when n is even. 
Therefore iSpin^„(q) is not uniquely defined for n even and we define it as 
follows. There is an involution z S Z{G) such that G/{z) = S0j„((7). For 
the other involutions Zi, Z2 S Z{G)\{z}, we have G/{zi) = G/{z2) which is 
not isomorphic to S02'„(g) and we denote these quotient groups as |SpinJ„(g). 
Notice that iSpin^2('i') appear as components in the centralizers 

of certain involutions in Ej(q) and E^{q), respectively. 

The involutions in long root SL2(g)-subgroups are called classical involu- 
tions. Below, we give the list of classical involutions and the semisimple socles 
of their centralizers. 

The following is a direct consequence of [28l Theorem 4.2.2] which we need 
in the sequel. 

Lemma 2.2 Let G be a finite simple group of Lie type defined over a field of 
odd order g > 3 and i & G be an involution. Then the second derived subgroup 
Ccii)" is the semisimple socle (Gcii)) of Ccii) which is a central product 
of (quasi) simple groups of Lie type in same characteristic. 

Note that if G is a universal version of a Lie type group defined over a field 
of odd order g > 3 then Gg(«)' is the semisimple socle of Gaii)- 

Passing to the groups with a non-trivial p-core we have the following. 
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Tabic 1: Classical involutions and the seniisimplc socles of their centralizers. 
G I OP'(CG(^)) 





t2 


SL2(<?) 02 SK^,{q) 


PSp2„(g) 


tl 


SL2(g) 02 Sp2„_2('?) 


Vt2n+l{q) 


t2 


(SL2((7) 02 SL2(g)) 02 f22„_3((?) 




t2 


(SL2(g) 02 SL2(g))o2 f)L-4('7) 


G2{q) 


tl 


SL2(g) 02 SL2(q) 




t2 


SL2(q) 02 SL2(g3) 


Fi{q) 


tl 


SL2(q) 02 Spe(g) 


El{q) 


t2 


SL2(g) 02 (^SL^(g) 


Eriq) 


tl 


SL2{q) 02 iSpini2(g) 


Esiq) 


ts 


SL2((?) 02£;7((7) 



Corollary 2.3 Let X be a finite group. Assume that X / Op{X) is a finite simple 
group of Lie type over a field of odd order q > 3 and i £ X be an involution. 
Then {Cx{i)/Op{Cx{i)))" is the semisimple socle of Cx{i)/Op{Cx{i))■ 
3 Pairs of long root SL2(g)-subgroups 

In this section, we determine the structure of the subgroups generated by ran- 
domly chosen two conjugate long root SL2((7)-subgroups in a finite simple clas- 
sical group of odd characteristic. 

Lemma 3.1 Let G = PSL„((7), n ^ 5. Let K ^ G be a long root SL2{q)- 
subgroup and g £ G be a random element. Then {K,K^) = SL4((7) with proba- 
bility at least 1 — l/q""^. 

Proof. Let ^ be a natural module for SL„(g) and V = U(BW, where K induces 
SL2{q) on U and fixes W. Assume that U = {ui,U2). Let g £ SLn{q) and 

gui = fliui + 02^2 + wi 

gu2 = biui + 62^2 + W2, 

where 0^,6^, i — 1,2, are elements in the base field and Wi, W2 S W. Observe 
that the vectors Wi and W2 are linearly dependent with probability l/g"~^. 
Therefore dim{U, gU) = 4 with probability at least 1 — l/q""^. □ 
The following two lemmas correspond to Lemmas 4.11 and 5.8 in j35j . 

Lemma 3.2 Let G = PSp2„((z), n ^ 3. Let A' ^ G be a long root SL2{q)- 
subgroup and g £ G be a random element. Then (K,K^) = Sp^lq) with proba- 
bility at least 1 — l/q^"^^. 
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Table 2: Ccntralizcrs of involutions in finite simple groups of Lie type of odd 
characteristic. 



G 


conditions 


type 


0^'{CGi^)) 


|CcG(i)(^)l 






h 




g-e 




2 fc ^ n/2 


tk 


SL|(g)oSLf,_,(q) 


q-e 




n even 


t' ,, 


(n/2 a-e^^^n/2{q ) 


q + e 






h 


^2n-liq) 


2(9-1) 






t[ 


^2n-l{q) 


2(9 + 1) 




2^k <n 


tk 


f]+ (g) X n2(n~k) + l{q) 


2 


n ^ 2 


2^k <n 


t'k 


^2kil) X ^2{n-k) + l{q) 


2 






in 


^tniq) 


2 






t'n 


^2nil) 


2 


PSP2„(9) 




tk 


SP2fe('?) 02 Sp2(„_fc)((?) 


2 


n > 2 




t„ 


72irySL„(g) 


9-1 






t'n 


(2kSU„(,) 


9+1 






tl 


^^L-2(9) 


9-1 






t[ 


^2l-2{<l) 


9+1 


P^^IJ?) 


2 s$ fc < n/2 


tk 




2 


n ^ 4 


2^k <n/2 


t'k 


^2A;(9) °2 ^2{n-k)il) 


2 






tn/2 


^tM) °2n+„M) 


2 






Si/2 


^2mi<l) °2 ^2mi<l) 


2 






t-n—l: t.fi 


■^SL2m{q) 


9-1 






f' f' 

^n-li ''n 


iSU2„(<z) 


9+1 






tn/2 


^^2^(9) X nt^iq) 


2 




P^2(2m+1)('?) 


tn 




q-e 


'DM 




t2 


SL2(<z) 02 SL2(<z^) 


2 


G2{q) 




tl 


SL2(g) 02 SL2(q) 


2 






tl 


SL2(q) 02 Sp6(g) 


2 






ti 


Sping((7) 


2 


Em 




tl 


Spinio(g) 


q-e 






t2 


SL2(g) 02 (^SL^(g) 


2 


Eriq) 




tl 


SL2((?) 02 iSpinJj((7) 


2 






ti, ^4 


l4:^SL|(g) 


2 






ty, ty 




9-e 


Es{q) 




tl 

ts 


iSpin+ (g) 
SL2(g) o^E^iq) 


2 
2 
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Proof. Let V be the natural module for Sp2„(g) and V = ViJ iVn be 

an orthogonal decomposition of V, where Vk is a hyperbolic plane for each 
k ~ Assume that Vk = {ek,fk), where {efc,/fc} are hyperbolic pairs. 

We may assume that K = Sp(Vi). Let g G Sp2„(g) and ~ Sp{Vl), where 
V( ^ V. It is clear that V{ is a hyperbolic plane in V and the subspace {Vi, V{) 
is non-degenerate 4-space with probability 

1 - A/B, 

where A is the number of hyperbolic planes intersecting with Vi non-trivially 
and B is the total number of hyperbolic planes in V . By the computation in 
[H Chapter 3], there are gr2n-i^g2n _ hyperbolic planes in a 2n-dimensional 
symplectic space, and there are g^n-i Jiypcj-bolic planes containing a fixed vec- 
tor. Hence, the the probability that {Vi, V{) is a 4-dimensional symplectic space 
with probability at least 

1 - ^""^('^^-^) > 1 - 1/,--. 

□ 

Lemma 3.3 Let G = PQ^{V) be a simple orthogonal group with dimV ^ 9. 
Let K ^ G be a long root Sh2{q) -subgroup and g E G be a random element. 
Then {K,K^) = ^g{q) with probability at least (1 — 

Proof. Let V be the natural module for il^{V). Then 

[K, V] = {kv ~v\v eV, keK) 

is an orthogonal 4-space of Witt index 2 and let U = [K,V] = {ei,e2, fi, fi), 
where {ci, fi} are hyperbolic pairs. Let U' = (e'^, e'j, /{, ^ 1^ be the orthog- 
onal 4-space of Witt index 2 on which induces SL2{q) for g € n'^{V). Again 
by computation in [21 Chapter 3] , there are 

_ if n is odd, 
g"-2(g"/2 _ l)(g"/2-i + 1) if n is even and G ^ Pn+{V), 

^n-2(^n/2 _^ l)(^«/2-l _ jf ^ ^^^^ g^^^ Q ^ ^^-(y^ 

total number of hyperbolic pairs and g"^^ hyperbolic pairs containing a fixed 
singular vector. By the similar computations as in Lemma 13. 2| the subspace 
Ui = ([/, e[,f[) is a non-degenerate 6-space with Witt index 3 and the subspace 
(?7i, 62,72) is a non-degenerate 8-space with Witt index 4 with probability at 
least 1 — 1/q. Hence, {U,gU) is an orthogonal 8-space with Witt index 4 with 
probability at least (1 — l/q)^. □ 

Lemma 3.4 Let G = PS\J„{q), n ^ 5. Let K ^ G be a long root SL2{q)- 
subgroup and g Cz G be a random element. Then {K,K'^) = SU4((7) with proba- 
bility at least 1 — 1/q. 
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Proof. The proof is same as the proof of the previous lemmas. The compu- 
tation follows from the fact that there are g2n-3(^«-i _ _ 
hyperbolic pairs and g^""^ them contains a fixed isotropic vector in an n- 
dimensional unitary space |48j . 

Lemma 3.5 Let G ^ (P)SL„(q), (P)SU„(q), n = 2,3,4, or {P)Spi{q), nviq), 
flf{q), and K he a long root Sh2{q) -subgroup in G, then {K,K^) = G with 
probability at least 1 — 1/q. 

Proof. Similar to the arguments above. 

4 Construction of Cg(z) in a black-box group 

In this section, we summarize the construction of the centralizers of involutions 
in black-box groups following [T3|, see also [T5] . 

Let X be a black-box finite group having an exponent E = 2'"'m with rn odd. 
To produce an involution in X , we need an clement x of even order. Then the 
last non-identity element in the sequence 

-L -f— tij ^ tLi ^ iXj ^ • • • ^ iXj ^ iXj J- 

is an involution and denoted by i{x). 

We call an element j £ X oi order 4 a pseudo-involution^ if it is an involution 
in X/Z{X) but not in X. Let F ^ X, then we call an element j € F a pseudo- 
involution in K, if 1 7^ p G Z{Y). We can produce pseudo-involutions in a 
black-box group X in a similar manner, that is, we first produce an element of 
order 4 and check whether commutes with the generators of X. 

Let i be an involution in X. Then, by |131 Section 6], there is a partial map 
C = QU Ci defined by 

(m^)(™+i)/2 . if o(m^) is odd 

i(M^) if o(m^) is even. 

Here o{x) is the order of the element x £ X. Notice that, with a given 
exponent E = we can construct Q{x) and Cii^) without knowing the 

exact order of ii^ . 

The following theorem is the main tool in the construction of centralizers of 
involutions in black-box groups. 

Theorem 4.1 (|13j) Let X be a finite group and i E X be an involution. If the 
elements x £ X are uniformly distributed and independent in X , then 

1. the elements Ci(^) "^^^ uniformly distributed and independent in Cx{i) cind 

2. the elements Qix) form a normal subset of involutions in Cx(i)- 



C-.X Cx{i) 

' ^ {i 
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We will use both of the functions Co and Q to generate Cx{i)- It follows 
directly from Theorem 14.11 that the image of the function (,{ is Cx{i) and the 
image of Q generates a normal subgroup in Cx{i)- Although the map Ci is a 
better black-box for the construction of centralizers of involutions, it turns out 
that the function is sufficient for our purposes, see Section [S] 

5 The heart of the centraUzer 

In this section, we describe the subgroup generated by the image of the function 
Co for any involution i G G, where G is a finite simple group of Lie type of odd 
characteristic. 

Let i € G be an involution. Define 

^,(G) = (C^(.g) I .9 G G). 

Here, we use the convention that Qid) — 1; if has odd order. We also assume 
in the sequel that Ci(ff) = 1 when ii^ has even order. 

Lemma 5.1 Let G be a finite group and i Cz G be an involution. Then the 
image of does not contain involutions from the coset iZ{G). 

Proof. Assume that Co(5) 1 some g & G, and consider the dihedral group 
D = {i,i9). Recall that Co(ff) = i(M^) G Z{D). Therefore, if CoCg) = where 
z € Z{G) is an involution, then ~ 1 since z G Z{G). Hence, Co(.9) — 

Since Co(5) = ^-^ by assumption, we have i^ = z. Thus i = z and Co(.9) = 1, a 
contradiction. □ 

Lemma 5.2 Let G = Gi x G2 be a direct product of finite groups Gi and G2. 
If i = {11,12) & G is an involution, then 'v'i(G) = ^ji(Gi) x 'v'i2(G2). 

Proof. Recall that the image of Co belongs to the conjugacy classes of involutions 
in Ccii) by Theorem 14. II Since conjugacy classes of involutions in G are direct 
products of conjugacy classes of Gi and G2, the result follows. □ 
Let j G G be a pseudo-involution. Then we define 

C'oia) = Kjfl 

where g £ G and i(ji^) is an involution produced from jj^ as in Section |4l 
Observe that Co (5) G CgU)- Moreover, we define 'v'j(G) similarly for a pseudo- 
involution j G G. 

Lemma 5.3 Let G = SL2((7) and j E G be a pseudo-involution. Then Vj(G) = 
Z(G). 

Proof. The result follows from the observation that G has a unique central 
involution and the image of the function Co is a set of involutions in G. □ 
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Lemma 5.4 LetG = SL2(9) andj E G be a pseudo-involution. Then (Ci(G)) = 
Nam and {(({0))" = I. 

Proof. We recall that if jj^ has odd order m, then Ci(ff) = {jj^Y"^~^^^^'^g~^- 
Let h = (jj^)*-™^^^^^, then it is straightforward to check that j'^ = j^j^ which 
implies that = f since f G Z{G). Hence, C{{g) G Nciij))- Observe that 

if i G T, then Naiij)) = Ng{T), Cg{j) = Cg{T) = T and \Ng{T)ICg{T)\ = 2. 
Hence, by Theorem SH we have (Cf(G)) = NG{{j)). Moreover, (C^(G))' < 
CgU) and (Ci(G))" = 1 since CgU) is a cyclic group of order q — 1 or g + 1. □ 

Lemma 5.5 Let G ^ (P)Sp2„((7), q > i and i be an involution of type <i. 

(a) Ifn^S, then (?,(G)' - Sj>^^_^iq). 

(b) IfG^ Sp4(g), t/ieri ^,(G) = Z{G). 

(c) If G ^ PSp4(g), then Vi(G) ^ E{GG{i)), where E(CG(i)) is the semisim- 
ple socle of Gg(i). 

Proof. 

(a) Assume first that G = Sp2„((7). Then Gg(«) = SL2(g) x Sp2„_2(9)- Let 
V = V- (B V+ he the decomposition of the corresponding vector space 
V, where V± are the eigenspaces of i for the eigenvalues ±1. Then the 
dimension of V- is 2 or 2n — 2. We assume that dimV_ = 2, the other 
case is analogous. It is clear that the dimension of the eigenspace for 
the eigenvalue —1 of the involution Q{g) is at most 4 for any g £ G. 
Therefore the image of contains non-central involutions in Sp2„_2(Q') 
since n ^ 3. Hence, ^i{G) = {±/2„} x Sp2„_2('z), where l2n is a 2n x 
2n identity matrix. In the case of PSp2„((7), we have GG{i) ~ SL2(q) o 
Sp2„_2((?), and, by the same argument, all the involutions in the image Q 
centralize the component isomorphic to SL2(g) and do not centralize the 
other component since n ^ 3. 

(b) We have GgC*) = SL2{q) x SL2{q). Hence, the set of involutions in Gg(«) 
is {i, iz, z}, where z G Z{G) is the unique involution in Z{G). By Lemma 
15.11 the image of Q docs not contain involutions i and iz, and the result 
follows. 

(c) If G ^ PSp4((?), then GG(i) = (SUiq) 02 SUiq)) x (t), where t is an 
involution interchanging the components. Since Q does not produce the 
involution i by Lemma 15. 1[ it produces either an involution acting non- 
trivially on both components of GG{i) or the involution t. In cither case, 
as Z>i{G) is normal subgroup in GG{i) by Theorem 14.11 (2), we conclude 
that 9,(G) ^ E{Gg{i)) = SU{q) 02 SL2(g). □ 

The following Lemma is a direct consequence of Glauberman Z*-Theorem 
[H page 262] and will be used to prove the next theorem. 



12 



Lemma 5.6 Let G be a non-abelian finite simple group and i be an involution 
in G. Then there exists an involution j E Ccii) such that j ^ i and = i for 
some g E G. 

Theorem 5.7 Let G be a finite simple group of Lie type over a field of odd 
characteristic p and i £ G be an involution. 

L If G is classical, then ^i{G) contains the semisimple socle ofCcii) except 
when G = PSp2„((7) and i is an involution of type ti. 

2. If G is exceptional, then 'v'i(G') contains at least one component ofGcii)- 

Proof. Let i G G be an involution. We prove the claim by constructing an 
involution in the image of which does not centralize the component (s) in 
Cg(«)- It is clear that the existence of such involutions guarantees that 'v'i(G) 
contains that the component(s) of the semisimple socle of Cg(«) since ^i(G) is 
a normal subgroup of Gcii) by Theorem 14. II 

Let G ^ PSL„+i((7), n ^ 2. Assume that i is an involution of type t^, 
where 2 ^ fc ^ n/2. Then the semisimple socle H of Gaii) is H ~ II1H2, 
where Hi = SLi;{q) and H2 = SL„+i_fc(g), and [iJi,iJ2] = 1- Observe that 
there is an involution j G Gcii) of type in G which acts as an involution 
of type ti in Hi and of type t^^i in iJ2- Hence, j = i^ for some g £ G. By 
construction, the involution Co(ff) = does not centralize the components Hi 
and H2. Hence, H '^i{G). Assume now that i is an involution of type ti 
or i(„^i)/2' tlion the semisimple socle of Gaii) is isomorphic to ^_i^ SLn(g) 

((k+i)/2 g-i) ^-l^('i+i)/2('?^)i respectively. In both cases, the involution i is 
the unique involution in Z^Gcii)), and, by Lemma 15.61 there is an involution 
j = i^ E Gcii) for some g E G, which does not centralize the semisimple socle 
of Gaii)- Hence, the involution Q{g) = ii^ is not central in Gg(«) and the result 
follows. The proof for PSU„((7) is analogous. 

Let G = PSp2„(g) and n ^ 3. We refer to Lemma [531 ^ for the case n = 2, 
and Lemma I5.5f a) for the involutions of type ti . Assume that i G G is an 
involution of type t^, where 2 ^ k ^ n/2. Then the semisimple socle H of 
Gg(i) is H = H1H2, where Hi = Sp2kil) ^^'^ ^2 == ^P2n~2kil)- Take an 
involution si G Hi which is of type t^-i in G and an involution S2 G H2 which 
is of type ti in G. It is clear that the involution s = S1S2 does not centralize 
the components Hi and H2. Moreover, we can assume that s is of type tk in G 
since si and S2 commute. Hence, s ~ i^ for some g E G. Now Co(.9) ~ E H 
and H ^ Z'i{G). If i is an involution of type tn or t'^, then the semisimple socle 
of Gg(«) is isomorphic to j^-p^SL'^,^{q) , where q = emod4. In either case, that 
is for e = ±, there exists g E G such that i^ E Gaii) by Lemma [5.61 Note that 
i^ is non-central in Gcii) as i is the only involution in Z{GGii))- Hence, the 
result follows from a similar argument above. 

Let G = ^2n+iiq) and n ^ 3. For the proof of n ~ 2, wc refer to Lemma 
15.51 (c) as il.5{q) = PSp^{q). Let V be the natural module for G. Then the 
dimension of the eigenspace of each of the involutions or t'^,, 1 ^ fc ^ n, 



13 



for the eigenvalue —1 is 2k. We denote these involutions by tk to simplify 
the notation, see Table [2] for the structure of their centralizers. Let i be an 
involution of type ti, then the semisimple socle H of Caii) is isomorphic to 
H = ^l2n-i{q)- Notice that there is a non-central involution of type ti in H, 
which is conjugate to i in G. Hence, H ^ 'v'g(*) by similar arguments above. 
Assume now that i is an involution of type tk, 2 ^ k < n. Then the semisimple 
socle of Ccii) is H = ^2kiq) ^ ^2(n-fc)+i('i'), whcrc q'^ = emod4. Note that 
^2kil) contains an involution si, which is conjugate to an involution of type 
tk-i in G, and ^2{n-k)+i{q) contains an involution S2, which is conjugate to an 
involution of type ti in G. Since si and S2 commute, we can assume that the 
involution s = siS2 is conjugate to an involution of type tk in G, and s = 
for some g E G. Now Q{g) = ii^ does not centralize the components of H 
since si and S2 are non-central involutions in the corresponding components 
and the result follows. If z G G is an involution of type tn, then, following the 
notation of the proof of Lemma TS.Sf a). we have dimV^- = 2n. The semisimple 
socle H of Gg(i) is isomorphic to Hl^{q), where = £mod4. Observe that 
ii9 £ C = GsL(y)(^- n V-g) for any g £ G. Since dimVL = 2n, we have that 
V- n V-^g has codimension ^ 2 and G/Op{C) is a subgroup of SL2(g). Notice 
also that we can choose g € G so that £ Ca{i) by Lemma 15.61 Hence, 
Co (5) = and it is clear that Co (5) does not centralize H. 

Let G = VQ,2n{q) a^nd n ^ 4. For the involutions of types tk or t'j^, where 
1 ^ fc < n — 1, the proof is similar to the case G = Vl2n+i{q)- If * is of 
type tn^i or t„, then the semisimple socle of Gc{i) is isomorphic to iSL^j(g), 
where q = emod4. In either case, by Lemma 15.61 there exists g £ G such 
that G C'g(*) a-nd is non-central in Gaii) since i is the only involution in 

Z(GG(i)). 

Let G = ^D4{q) or G2{q), then there is only one conjugacy class of invo- 
lutions in G, and Gaii) — SIj2{q) 02 SL2(g'^) or SL2(g) 02 SL2(g), respectively. 
Notice that there is an involution s G Gcii) which does not centralize the com- 
ponents, and it is necessarily conjugate to i since there is only one conjugacy 
class of involutions. Let s = for some g £ G, then Co(ff) = does not cen- 
tralize the components, hence the result follows. We apply the same argument 
to the group ^G2(g) as there is only one conjugacy class of involutions in ^G2(g). 

Let G be a group of type F^^q). Let i be an involution of type ^4, then the 
semisimple socle H of Gaii) is isomorphic to H = Sping(q) and Z{GG{i)) = (*). 
By Lemma [5.61 there exists g & G such that i ^ £ C'g(*) and Co(ff) — is 
non-central in H . If i is an involution of type ti, then Gaii) = ^^2{q) °2 Sp6(<z) 
and Z{GG{i)) — (i). Again, by Lemma there exists g & G such that Q{g) = 
ii^ docs not centralize Spg(q). Hence, Spg(g) ^ Vi{G). By the same argument, 
if SL2{q) is a component in the semisimple socle of Gaii) for G = Ea^q), E'j{q), 
Es{q), then 'v'i(G) contains the other (quasi)simple component of the semisimple 
socle of Gaii)- 

If the centralizers of involutions in the remaining exceptional groups Eg^q), 
E'j{q) and Eg,{q) do not have a component isomorphic to SL2(g), then the 
semisimple socle is a (quasi)simple group, see Table [2j Hence, we can apply 
previous arguments to these cases. □ 
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Corollary 5.8 Let G he a quasi-simple group of Lie type defined over a field of 
odd characteristic and i € G be a non- central involution in G. 

1. If G is classical, then ^i(G) contains the semisimple socle ofCcii) except 
when G = (P)Sp2„(9) and i is an involution of type ti. 

2. If G is exceptional, then *v'i(G) contains at least one component ofCcii)- 

Proof. Note that the non-central involutions in G map to involutions in G/Z{G) 
and we apply the same arguments as in Theorem 15.71 □ 

Remark 5.9 In our algorithms, the map Q will be considered only in the con- 
struction of at least one quasisimple component of a centralizer of an involution. 
Therefore, the exceptions in Theorem l5.7l (2) and Corollarv 15.81 (2) do not pro- 
vide any difficulties in our main algorithm. 

6 Construction of a long root SL2(g)-subgroup 

The aim of this section is to prove Theorem 11.11 We present the following 
algorithm. 

Algorithm 6.1 (cf. [5ll Algorithm 5.1]) "Construction of a long root 

SL2((j)-SUBGROUP IN A FINITE SIMPLE GROUP OF LlE TYPE" 

Input: A black-box group isomorphic to a finite simple group G of Lie type 
defined over a field of odd order q > 3 except PSL2((7) and ^6*2(9). 

Output: A black-box group which is a long root Sh2{q) -subgroup in G. 

We need the following terminology. Let G be a group and Gi ^ G, i = 
1, . . . ,n. Assume that 

G=(G, \ i^l,...,n) 

and Gfe commutes with G; for any k ^ I. Then we say that G is a commuting 
product of the subgroups G^ for i = 1, . . . , n. 
Algorithm 16.11 has three major components: 

1. Construct the ccntralizcrs of involutions recursively to find a commuting 
product of the groups (P)SL2((7'"') in G, where fc ^ 1 may vary; Section 
l6Jl 

2. Construct one of the components K = (P)SL2((7'^) in the commuting prod- 
uct found in Step 1; Section [^21 

3. Check if is a long root SL2(g)-subgroup of G; Section [Ol 
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Remark 6.2 1. In Step 1, we may have a commuting product of the subgroups 
(P)SL2(g), where q may vary but the characteristic of the underlying field is the 
same, for example, in G = ^Di{q) there is only one class of involutions and 
Cg(«) = SL2((7) 02 SL2(g^) for an involution i G G. 

2. The long root SL2 ((j')-subgroups in simple groups of Lie type of odd charac- 
teristic are indeed isomorphic to SL2{q) by Thcorem l2.1l Therefore if we obtain 
a direct product of subgroups PSL2((j') in Step 1, then we conclude that it does 
not contain a long root SL2(q)-subgroup as a component and we repeat Step 1 
to construct a new commuting product of subgroups (P)SL2(q). 

It is easy to see that the proof of Theorem 11.11 follows from Algorithm 16.11 
and Corollary [531 

6.1 Constructing products of (P)SL2(g) 

In this section we present an algorithm concerning Step 1 of Algorithm 16. II The 
algorithm is as follows. 

Algorithm 6.3 (cf. [HI Algorithm 5.3]) "Construction of a commuting 

PRODUCT OF SUBGROUPS (P)SL2((7)" 

Input: A black-box group isomorphic to a finite simple group G of Lie type 
defined over a field of odd order q > 3 except PSL2((?) and ^6*2(9). 

Output: A black-box group which is a commuting product of subgroups 
(P)SL2((7'^) for various k ^ 1. 

Description of the algorithm: 

1. Produce an involution i = i{g) from a random element g £ G. 

• Check if i G Z{G). If we always have i £ Z{G) after 0{N) steps, 
where N is the input length of the black-box group G, then return 
G. Otherwise, go to the next step. 

2. Construct a subgroup L where ^i(G) ^ L ^ C'gC*) by using — C,lUC,\. 

3. Construct L' and L" . 

• If L" = 1 then return (i*^)'. Otherwise, set G = L" and go to Step 
1. 

6.1.1 The involution i = i{g) from a random element g 

We pick a random element g £ G and check if 5^ =1, where E = m 
odd, is the exponent of the group given as an input. By [321 Corollary 5.3], the 
proportion of elements of even order in groups of Lie type of odd characteristic 
is at least 1/4. As soon as we find an element 17 G G of even order, we construct 
i = i{g) as described in Section IH 
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Next, we need to check whether i = \{g) is central in G or not. Notice 
that this procedure is unavoidable in the recursive steps of our algorithm as 
Ccii)" contains central involutions in most of the cases, see Tabled Since the 
generators of G are given, it is straightforward to decide whether i G Z(G) or 
not. We can find a non-central involution in view of the following lemma. 

Lemma 6.4 Let G he a universal version of a finite group of Lie type defined 
over a field of odd characteristic and G ^ SL2((?). Then the proportion of 
elements in G producing non-central involutions is hounded from helow by a 
function of the Lie rank of G. 

Proof. Let T be a maximal torus twisted by an element w S as in Section [2. II 
Then the probability of being an clement in a torus conjugate to T depends only 
on the Wcyl group W not on the order of the field by the remark after Equation 
([2]) in Section 12.11 Therefore if T is any torus and i G T an involution, then the 
number of elements g € G with i = i(g) depends only on W not on the order of 
the field. In classical groups, tori twisted by the cycles of length less than the 
length of the longest cycle do not contain central involutions. This observation 
immediately follows from the tables of the centralizers of involutions and the 
orders of the corresponding tori given in |20| . Note that among the exceptional 
groups only the universal version of Ej{q) has a central involution in which case 
the same arguments apply. □ 

We give an example in the easiest case. Let G = SL„(g), n even and n ^ b. 
Then a maximal torus T twisted by a product of an {n — 2)-cycle and a 2-cycle 
is of the form T = ■;pj{Ti x T2), where Ti is a cychc group of order — 1) 

and T2 is a cyclic group of order (q^ — 1). Note that as n is an even number, 
{q^ — 1) divides (g"^^ — 1) and therefore involutions produced from random 
elements in T belong to Ti with probability very close to 1. It can be observed 
from Table [2] that Ti has involution i of type ^2 in G by comparing the orders of 
Gcii) and Ti. Since W ~ Sym(7i), the symmetric group on n letters, and n ^ 5, 
Gwiw) has order 2(n — 2). Therefore the probability of producing non-central 
involutions from random elements is at least 2{n-2) • 

Thus, if we can not find a non-central involution of the form i ~ i{g) G G 
in 0{N) tests of random elements g € G. then by [29], we can deduce that 
G is isomorphic to the direct product of copies of S\j2{q), and we take this 
subgroup as an output. Otherwise, we go to the next step. Note that the 
number, 0{N) = 0(71^ log g), of repetitions can be reduced to 0(n), if the Lie 
rank of G is known. 

6.1.2 Construction of Gci}) 

Let i = \{g) be a non-central involution in G. Take a subset S G G consisting 
of random elements of G and consider the subgroup {^{S)). 

By Lemma [2T2I the semisimple socle of Gc{i) is Gc{i)" , which is a commut- 
ing product of (quasi)simple groups of Lie type. By [MlIlD], randomly chosen 
two elements in a finite simple group G generate G with probability tending 
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to 1 as |G| oo. By [Ml Proposition 10], a similar result holds for a direct 
product of simple groups where the orders of each of the factors approach oo. 
Thus randomly chosen two elements in Ccii) generate a subgroup containing 
the scmisimple socle of Cg(*) with probability close to 1 when the size of the 
field is large. We know that the map (I produces uniformly distributed random 
elements in Cc (i) by Theorcm l4.1l Therefore if a reasonable number of elements 
g G S satisfy CKs) 1; then we conclude that {({{S)) contains the scmisimple 
socle of Cg(«). 

If Q is not defined for the elements in S, then Q is defined for all the 
elements in S. In this case, we use only the function for the generation of 
a subgroup in Caii)- Recall that the image of the map is a normal subset 
of Cg(«) by Theorem 14.11 By [40l Theorem 1.1], for any normal subset S C G 
of a finite simple group G, there exists a constant c such that 5™ = G for any 
TO ^ clog|G'|/log|S'|. A similar result also holds for a direct product of simple 
groups by considering direct product of normal subsets. Therefore, in such a 
case, we take S to be sufficiently large so that we have {Q{S)) = ^i(G). Now, 
by Lemma 15.21 and Theorem 15.71 (G) contains at least one component of 
Gg(«). Experiments in GAP show that for a reasonably sized subset S C G we 
have (Cci('5')) = ^i(G). A reasonable number of generators for ^^(G) produced 
by Q is, for example, 50 for groups of 50 x 50 matrices. 

6.1.3 Semisimple socle of Ga{i) 

From now on we assume that ^i(G) ^ {C{S)), and by definition (C'(S')) ^ 
GGi^)■ 

We shall construct the scmisimple socle of (C*(S')). Note that the derived 
subgroup of a black-box group can be constructed in Monte-Carlo polynomial 
time [HI Corollary 1.6]. By LemmaOand TheoremlETl the subgroup {C{S))" 
contains at least one of the components of Gcii)" unless G = Sp4((j), i S G is 
an involution of type <i and {C{S))" = ^i(G)", see Lemma [531 However, the 
probability that (C*(S'))" = C'i(G)" in G = Sp4((7) for a classical involution i is 
close to by Theorem 18. II 

Assume that we are at the fc*'' recursion of our algorithm, namely 

G.,^{C{Sk))", 

where ik = i(.g), 9 e G,'^_^ and Sk C G,'^_^. Set H = Gl_^. 

If G'l^ ^ 1, then we set G = G'l^ and go to Step 1 of Algorithmic If 
Gj" = 1, then by Lemmas 15.21 15.31 and 15. 4[ is a commuting product of 
subgroups isomorphic to (P)SL2((j') and acts as a pseudo-involution on some 
components of H. Hence, we return the subgroup (j^)'. Note that the normal 
closure of a black-box group can be constructed in Monte-Carlo polynomial 
time [SI Theorem 1.5]. 
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6.2 Constructing SL2(g) 

The aim of this section is to present an algorithm concerning Step 2 of Algorithm 
16.11 We construct a normal subgroup SL2{q'') which appears as a component in 
a given commuting product of groups (P)SL2(g') for various I found in Section 

ED 

We need the following results. 

Lemma 6.5 Let K = SIj2{q), g > 3, and L = K x K. Then the probability 
of producing a pseudo-involution acting trivially on one component is at least 
1/24. 

Proof. It is well known that all semisimple elements in K\Z{K) are regular, 
therefore they belong to only one torus. There are two conjugacy classes of tori 
in K: split and non-split tori. A split torus is a cyclic group of order q — 1 and 
a non-split torus is a cyclic group of order g -I- 1 . 

Let Ti be a split torus in K ^ then 

\K:NK{Ti)\=q{q + l)/2. 

Let T2 be a non-split torus in K, then 

\K ■.NK{T2)\^q{q~l)/2. 

Hence, the total number of tori is q^ . Therefore the probability of a semisimple 
element belonging to a split torus is 

l g(g+l) ^ 1 
2 g2 > 2 

and to a non-split torus is 

1 g(g - 1) ^ 1 1 

2 g2 ~ 2 ?, 

since g > 3. Let g = (31,(72) G L. Then g\ and §2 belong to different classes 
of tori in L with probability at least 1/6. Note that the order of one of the 
tori is divisible by 4 and the probability of finding an element in this torus 
which has order divisible by 4 is at least 1/4. Therefore the probability that a 
pseudo-involution produced from a random element acts non-trivially on only 
one component of L is at least 1/24. □ 

Corollary 6.6 Let L be a commuting product of the groups isomorphic toSlj2{q)- 
Then the probability of producing a pseudo- involution acting trivially on some 
components of L is at least 1/24. 

Lemma 6.7 Let K = Slj2{q) and t € K be a pseudo-involution. Then elements 
of the form tt^ have odd order with probability at least 1/6. 
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Proof. The elements z = tt^ belongs to a torus of order q — 1 or g + 1. The 
probability that z belongs to a certain type of torus is at least 1 /3 by the proof 
of Lemma [6.51 and one of (g ± l)/2 is odd. Therefore the element z has odd 
order with probability at least 1/6. □ 

Now we can present our algorithm. 

Algorithm 6.8 (cf. HU Algorithm 5.4]) "Construction of SL2((?)" 

Input: A black-box group L which is a commuting product of groups (P)SL2((j'') 
for various I. 

Output: A black-box group SL2{q'^) for some k appearing as a component 
in the commuting product or return the statement "L is a direct product 
of groups PSL2((7') for various I". 

Description of the algorithm: 

1. Produce a pseudo-involution t E L. If we can not find any pseudo- 
involution then return the statement "L is a direct product of PSL2((7') for 
various 1" and go to the beginning of Step 1 of Algorithm 16. II Otherwise, 
go to the next step. 

2. Construct {t^)' and check if {({{S))" = 1 for a reasonably sized subset 
S C L. U iCliS))" 1, then set L = (t^)' and go to Step 1. 

Stepl: Recall that the random elements of SL2((?) belong to a torus of 
order q±l with probability 1 — 0(l/g) by [3D|. Observe that one of the numbers 
(5±1) /2 is even and at least half of the elements in such tori have order a multiple 
of 4. Therefore the probability of finding an element of order a multiple of 4 is 
close to 1/4. Hence, if L has a component isomorphic to SL2{q), then we can 
produce a pseudo-involution from random elements by following the procedure 
in Section m If we can not find a pseudo-involution in L, then we deduce that L 
is a direct product of PSL2(g) and we start the procedure from the beginning. 

Step2: Let i be a pseudo-involution produced from a random element in L. 
Then 

L = {t^ycLity. 

By Corollary 16.61 t acts trivially on some components of L with probability 
at least 1/24. Hence, the number of components in the subgroup {t^y is less 
than the number of components of L. We know that {Ci{S))" ^ CL{ty' for any 
subset 5' C L by Lemma 15.41 By using Lemma 16.71 we can choose a reasonably 
sized subset 5 C i so that CUt) = {CiiS))- Now if {Cl{S)y' ^ 1, then we 
set L = (t^)' and continue in this way. Note that if {Ci{S))" = 1, it may not 
necessarily be true that L = SL2(g'*'') since t G L may act non-trivially on more 
than one component of L. Therefore we check if {Ci{S))" = 1 for different 
pseudo-involutions t G L, say m times. If we always have {({{3))" = 1 for 
different pseudo- involutions t £ L, then we deduce that L = SL2((j''^) for some k 
in the commuting product where the probability of error is at most (1 — 1/24)™ 
by Corolla.rv l6.61 
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Remark 6.9 Notice that one can extend Algorithm l6.8l to construct each com- 
ponent isomorphic to SL2((j) in a commuting product L of subgroups (P)SL2(g). 
For this, let K = Slj2{q) be a component of L and t & K a pscudo- involution. 
Then we set L = Ccit)" and apply Algorithm 16.81 

6.3 A long root SL2(g) 

In this section we present an algorithm concerning Step 3 of Algorithm 16. II We 
determine whether the subgroup K = SL2((7'') constructed in Section is a 
long root SL2((;)-subgroup in G where G ^ '^£'4(9) or Gziq)- The groups G2{q) 
and ^D4{q) arc treated in Subsection l6.3.1l 

Algorithm 6.10 (cf. [STJ Algorithm 5.6]) "Checking whether a given 
(P)SL2((?) IS A LONG ROOT SL2(q)" 

Input: A black-box subgroup K ^ G which is known to be isomorphic to 
SUiq) where G ^ '^D^q) or G2{q). 

Output: The truth value of the statement: "K is a long root S\j2{q)- 
subgroup in G". 

Description of the algorithm: 

1. Find the field size q. 

2. Construct G = Cg(2)", where z e Z{K). 

3. Construct N = {K,K^) for a random g £ G. 

4. Check if n'^^'^ ^ 1 for random elements n £ N. If such an element is 
found, then return the statement '^K is not a long root SL2((j')-subgroup". 
If we can not find such an element then we deduce that K is a long root 
SL2 (g)-subgroup. 

Recall that if is a long root SL2(g)-subgroup in G, then, by Theorem l2.11 
K = for any g G G = Ga{z)", where z G Z{K). If not, then we prove that 
K is strictly contained in the subgroup = {K,K^) for a random g E G with 
probability close to 1 except for the groups G2{q) and ■^1)4 (g). 

First, we find the size of the field by using [M] Algorithm 5.5]. Then we 
construct G ~ Gg{z)" by using Co U Ci ^-nd consider N ~ {K, K^) for random 
g€G. 

If K is not a long root SL2(q)-subgroup then either _fir is a short root SL2(g)- 
subgroup or the order of the field is increased in one of the recursive steps of 
Algorithmic 

Assume first that the order of the field is increased in the recursive con- 
struction of centralizers of involutions. This is possible only when G = PSL^ (q) 
where n is an even integer, see Table [2j Assume that G = PSL„(q) and 
K ^ SL2(g2 ) for some fc ^ 1. Then K can be embedded naturally in SL2fc+i (q) 
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and C = SL2fc+i((7) o SL„_2''+i (?)• Now take Ki = Sl^2{q^'' ^) < K- Then 
iVi = {Ki,Kf) ^ SUiq^"'') with probabiHty at least 1 - Oil/q^"'') for g£C 
by Lemma 13.11 Now A^i contains sufficiently many elements whose orders do 
not divide \K\ = [q^ ~ 1). The case G ^ PSU„((7) is analogous. 

Now we assume that K is a short root SL2((7)-subgroup in G. Then by [3l 
Table 14.4], K = PSUiq^), PSUiq) or PSUiq^) for G ^ PSU„(g), !l2n+i(g), 
Pf2^„(g), respectively. Notice that it is easy to recognize these cases since K does 
not contain a central involution. Now we are left with the cases G = PSp2„((3'), 
Fi{q) and ^Eeiq). 

If G ^ PSp2„(<7), then K = SL2{q) and C ^ Sp4(g) 02 Sp2„„4(g). Here K 
is contained in the component isomorphic to Sp4((j'). We have N = {K,K^) = 
S'p^{q) with probability at least 1 — 1/ q for random g £ which follows from a 
similar idea of the proof of Lemma [3?2] It is clear that the subgroup N contains 
sufficiently many elements whose orders do not divide q{q^ ~ 1)- 

If G ^ Fiiq), then K ^ SL2(g) and C ^ Sping((j) [31 29.7]. Since C/Z{G) ^ 
^g{q), it is enough to obtain the estimates in the classical group ilsiq). Let V be 
the natural module for i^g{q) and if be a short root SL2 ((?)-subgroup in flg(q), 
then [K, V] is a orthogonal 3-space of Witt index 1. Following the same idea in 
the proof of Lemma [3731 we obtain that N/Z{N) = PVL'^{q) with probability at 
least 1 — 0(l/g), where N = {K,K^) for g £ C. Now the subgroup N contains 
sufficiently many elements whose orders do not divide q{q^ — 1). 

If G ^ ^Eeiq), then K = SL2(g2) and G ^ Spin^oCg) [3 29.7]. Hence, 
C/Z{G) = PftiQ{q). In this case it is enough to make the estimates in fi^Q(g). 
Notice that [if, V^] is an orthogonal 4-space of Witt index 1, where V is the 
natural module for ^^^{q) and K is a short root SL2((7)-subgroup in ^.^^{q). 
The rest is similar to the arguments above. 

If we can not find an clement n (z N satisfying n**-^ 7^ 1, then we conclude 
that if is a long root SL2(g)-subgroup of G. Notice that the output "if is not 
a long root SL2((j')-subgroup" is always true. 

6.3.1 The groups G2{q) and ^Di{q) 

Let G = G2{q) or '^D4{q) and i be an involution in G, then Gcii) is isomorphic 
to SL2(q)o2SL2(q) or SL2((j') 02 SL2((;'^), respectively. Note that the components 
of CG{i) are long and short root SL2 ((;)-subgroups in G. If G = ^D4{q), then 
the subgroup K = SL2{q'^) ^ Gg(«) is a short root SL2 ((7)-subgroup in G. If K 
is any component of Ccii) and z be the unique involution in Z{K), then i = z 
and K = for any g S Cg{z). Hence Algorithm 16. 101 returns that if is a long 
root SL2((7)-subgroup. Therefore, in these cases we use the following algorithm. 

Algorithm 6.11 "Construction of a long root SL2(g) in G2(g) and 

3i?4(9)" 

Input: A black-box group G isomorphic to G2{q) or ^D/^(ci), and the size 
of the field q. 

Output: A black-box group if which is a long root SLi2{q)- subgroup in G. 
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Description of the algorithm: 

We first distinguish ^Di{q) from G2{q). Note tliat |G2(q)| = q^iq^ - l)iq^ - 1) 
and \^D4{q)\ = + q'^ + l){q^ - l){q^ - 1). Hence, if we find an element 

g € G sucli that 1, where m = q^{q^ — ~ 1)> then we deduce that 

G = ^D4{q). Recall that the proportion of such elements corresponds to the 
sizes of the conjugacy classes of tori, which depend only on the Weyl group, so 
it is bounded from below by a constant. 

Assume that G = G2{q)- Let i G G be an involution, then Ccii) = Li 02 L2, 
where Lk = SL2{q), fc = 1,2. Note that Li and L2 are short and long root 
SL2 ((7)-subgroups in G. Assume that Li (resp. L2) is a short (resp. long) root 
SL2(q)-subgroup in G. Now let j be an involution in Ccii) which does not 
centralize Li and ^2- We have Gcij) = SL2{q) 02 SL2(g) since there is only 
one conjugacy class of involutions in G. Let Ki and K2 be short and long root 
SL2 ((;)-subgroups in GgU), respectively. Then it is easy to see that all the pairs 
{Ls,Kt}, s,t = 1,2, generate 62(5) except (i2,i^2) = SL3(g) or SUaCg) [3i 
Theorem 2.1]. Now we need to distinguish G2{q) from SL3(g) to recognize the 
long root SL2((?)-subgroups. To do this, we compute the number of components 
in a centralizer of an involution by following the arguments in Rcmark l6.9l It is 
clear that the number of components in a centralizer of an involution in SLg (q) 
is one, whereas there are two components in a centralizer of an involution in 
G2(g). 

Let G = ^D4{q) and i e G be an involution. Then Gg(«) = SL2((7)o2SL2(g^) 
where SL2{q) corresponds to a long root and SL2(q'^) corresponds to a short 
root SL2(g)-subgroup in G. To construct SL2{q), let 5 be a set of generators 
for Caii)- Setting m = q{q — l){q + 1), we consider 

5" = {.9™ I ,9 e 5}. 

Now L = (5™) = SL2((j'^) and we construct an element g G Cco{i){L). Note 
that {q — l,q'^ + I) = {q + 1,9'^ — 1) = 2. Therefore we look for elements 
g £ Caii) satisfying one of the conditions +1) 1 and o{g'^ "'"^) > 2 or 

= 1 and o{g^'-') > 2. Let g = (51,52) e Gg(*), gi'>-'^('^'+') = 1, 
where gf ^^ = 1, 5^ = 1 and 5^ is non-central in CQ{i). By Lcmma l6.5[ we 
find such elements with probability at least 1 /6 since the probability of finding 
a non-central element 51 G S\j2{q) of order dividing g — 1 is at least 1/2 and the 
probability of finding an element 52 G SL2(g^) of order dividing g'^ -I- 1 is at least 
1/3. Now, setting h = g'^ we have [h'^'^'^^^)' = ?>L2{q) which corresponds to 
a long root SL2((j')-subgroup in G. 

6.4 The Main Algorithm 

We can now present Algorithm 16. II 
Description of Algorithm 16.11 

1. Run Algorithm 16.31 to construct a commuting product L of the subgroups 
(P)SL2((70 for various I ^ 1. 



23 



2. Run Algorithm 16. 81 to construct a subgroup K = SL2(g') for some 1^1, 
which is a component of L. 

2.1 If the number of recursive steps in Algorithm 16.31 is more than one, 
then we go to Step 3. Otherwise, we check if G = G2{q) or '^D4{q). 

2.2 If G is isomorphic to G2{q) or ^D4{q), then we run Algorithm 16.111 
to construct a long root SL2((7)-subgroup. Otherwise, we go to Step 
3. 

3. Use Algorithm 16. 101 to check if iiT is a long root SL2((7)-subgroup. If not, 
then construct another component of L and check if it is a long root 
SL2((7)-subgroup. If none of the components of i is a long root Sh2{q)- 
subgroup, then we start the procedure from the beginning without going 
through subroutines 2.1 and 2.2 in Step 2. 

Step 1: We run Algorithm 16.31 as described in Subsection 16.11 If Algo- 
rithm 16.31 fails to succeed in constructing a commuting product of subgroups 
(P)SL2((7) for various q, for example, it may return the identity group, then 
the construction of the component (s) of the centralizers of involutions in one 
of the recursive steps has failed. In this case, we produce more generators for 
the centralizers of involutions which are already constructed in the recursive 
steps. Thus we assume that Algorithm 16.31 returns a commuting product L of 
subgroups (P)SL2((7') in G, where / ^ 1 may vary. 

Step 2: If the number of recursive steps in Algorithm 16.31 is more than one, 
then we conclude that G is not isomorphic to 62(9) or ^1)4 (q), and we go to 
Step 3. 

Now assume that the number of recursive steps in Algorithm 16. 31 is one. By 
Table [2j this can only happen in the following groups: 

PSL§(<Z), PSLl{q),PSpM,^7{q),Pnt{q),G2{q),'D4{q). 

Since we have special subroutines to construct a long root SL2((?)-subgroup in 
G2{q) and ^I?4(g), we need to distinguish them from the other groups listed 
above. To do this, we first compute the size, q, of the field. Let K = SL2(g') < 
G, where / ^ 1, be a subgroup constructed by Algorithm 16.81 Now we check 
if Algorithm 16.101 returns that K is a. long root SL2(g)-subgroup in G. If not, 
then G ^ G2{q) or •^D4{q), and we go to Step 3. If Algorithm 16. 101 returns that 
if is a long root SL2((7)-subgroup, then we conclude that I = 1 except possibly 
G ^ ^D^iq) and K ^ SL2(q3). 

Recall that we compute the size of the field in Algorithm 16.101 by using jSTl 
Algorithm 5.5]. Assume that we compute the size of the field as qo = for 
some fc ^ 1. Since p is given as an input, we can compute fc. If fc is not divisible 
by 3, then clearly q = qo- Now assume that k is divisible by 3. Let qi = -p^l^ 
and m = ^D4{q\)\ = ql^iqf - l){qf - + qf + 1). Then we look for an 

element g & G such that 9™ 7^ 1. If we can not find such an element, then we 
conclude that q ^ qi and G = ^D4{q), and we run Algorithm 16. 1 II to construct 
long root SL2(g)-subgroup. Observe that if G ^ '^D4{q), then q = qf, and we 
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can find an element g in all the groups listed above such that 5™ 7^ 1 with high 
probability. Hence we have computed q. 

Now the groups PSL4(g), PSp4((7), Pfig (g) and ^17(5) have elements of order 
dividing — 1 but not — 1 so G2{q) and ^D/^{q) can be distinguished from 
these groups since 62(9) and ^Di{q) do not have such elements. Similarly, we 
can distinguish ^Di{q) from G2{q) and PSL3((7) since '^Di{q) has elements of 
order dividing q^{q^ + q'^ + 1) but not q^{q^ -I), and G2{q) and PSL3(g) do not 
have such elements. Finally, we use the same arguments in Algortihm 16.111 to 
distinguish G2{q) from PSL3(q). 

Alternatively, assuming the existence of an order oracle, 6*2 (g) and ^Dn{q) 
can be distinguished from the other groups listed above by using statistics of 
element orders [9j. 

If G = G2{q) or ^Di{q) then we run Algorithm 16 . 1 1 1 to construct a long root 
SL2 ((j)-subgroup in G. Otherwise we go to Step 3. 

Step 3: We run Algorithm 16. 101 to check whether K \s a. long root SL2(g)- 
subgroup in G. If K is not a long root SL2(g)-subgroup, then we construct 
another component of L by following the arguments in Remark 16.91 

Notice that if K is not a long root SL2 ((7)-subgroup, then we do not need to 
go through the subroutines 2.1 and 2.2. 

7 Estimates 

In this section we estimate the probability of producing an involution i = i{g) 
from a random element g € G where the recursive construction of centralizers of 
involutions applied to Gcii) returns a commuting product of long root SL2(g)- 
subgroups in G. The estimates in some cases are very crude and on the cautious 
side, the actual probabilities of success are much higher. 

Let n = 2^m, m odd. Then the number k is called the 2-height of n. 

Recall that we need an element of even order to produce involutions in G and 
the proportion of elements of even order is at least 1/4 by [HI Corollary 5.3]. 

Assume that G = PSL„(g) and i is an involution of type t[^/2- Then Caii)" = 

{n/2^q-i) ^Ln/2(g^)- If involution of type ^® constructed in one of the 

recursive steps, then we obtain a subgroup SL2(q^'") for some fc > 1 which is 
not a long root SL2((7)-subgroup in G. Note that an involution of type 
belongs only in a maximal twisted torus T, twisted by the longest cycle w 
in the Weyl group W = Sym(n). Therefore i = i{g) where g is an element 
from a maximal twisted torus. The number of maximal twisted tori in G is 
\G : Ng{T)\. Moreover, \Ng{T) : T\ = \Cw{w)\ by Equation © in Section[0 
and |Ch'(w)| = n since w is a cycle of length n in W. Hence, there are at most 

|G| _ |G| _ |G| 
\Ng{T)\ \Cw{w)\ ■ \T\ n\T\ 

elements which produce involutions of type t'^yj- Therefore the probability 
of producing an involution of type i' ,2 is at most l/n. The other types of 
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involutions have centralizers of the form L = SLfe(q) o SL/(g) in which case 
producing an involution i = \{g) of type t'^jr^ or t'^^^ in the components is close 
to as we must have an element g € L whose components belong to the same 
type of torus and have the same 2-hcight. Therefore if we have an involution 
of type different than t'^^^ in the first step, which is of probability at least 
1/4(1 — 1/n), then Algorithm 16.31 returns a commuting product of long root 
SL2(g)-subgroups with probability close to 1. The case where G = PSU„((7) is 
analogous. 

Assume that G = PSp2„((7) and q = 1 (mod 4). Let i be an involution of 
type tn, then Gaii)" = (2^1) ^-^"(g)- construct an involution of type t„ in 

one of the recursive steps, then Algorithms 16.31 and 16 . 81 do not return a long root 
SL2(q)-subgroup. To sec this, let G ^ Sp2„(g), V be the natural module for G 
and t be the preimagc of the involution i. Then Gcii) is a maximal subgroup 
of G which leaves invariant some totally isotropic subspacc of V . Therefore if 
K = SL2 (q) is the subgroup obtained by recursive construction of centralizers of 
involutions applied to Gcii) and W is the subspace on which K acts, then the 
symplectic form on W is degenerate. Now, it is easy to see that the involutions 
of type tn belong to some maximal twisted torus T ^ G. The number of 
maximal twisted tori in G is |G : Ng{T)\ and \Ng{T) : T\ = \Gw{w)\ = 2?!, 
since T corresponds to a longest cycle w in the Weyl group W = Z2I Syni(ri), 
see Lemma 2.3 in [1]. Hence, there are at most 

|G| 
2n\T\ 

elements which can produce involutions of type tn- Therefore the probability 
of producing an involution of type tn is at most l/2n. Hence, we can produce 
an involution which is not of type tn with probability at least 1/4(1 — l/2n). 
If g = — 1 (mod 4), then Gcii)" = jYnjSVniq), where i is an involution of type 
tn and the same arguments apply to obtain the same estimate. As above, the 
other types of involutions have centralizers of the form Sj>2kil) °^T'27i-2kil) 
so the probability of producing an involution of type tk or tn-k from random 
elements in these components is close to by the same arguments. 

Assume that G = Pf22„('?), n ^ 4. If we construct ^SLn{q) as a ccntralizer 
of an involution, then a lower bound for the probability of constructing a long 
root SL2((7)-subgroup follows from the similar estimate for PSL„((7). The desired 
involution is of type t„ or t^- Again these involutions belong to a maximal 
twisted tori. By using the same ideas above the probability of obtaining such 
an involution is at least l/2n, and the overall probability is 1/4(1 — l/7T,)(l/2n). 

Assume that G = fl2n+iiq), n ^ 5. Let i be an involution of type t„. Then 
Ccii)" — ^2nil)' where 5" = e(mod4). Note that only maximal twisted tori 
whose orders are 1/2((7"±1) contain involutions of type t„ . Since 5l2n+i('?) and 
PSp2„((z) have the same Weyl groups, the estimate for the construction of an 
involution of type t„ in the first recursive step of Algorithm 16.31 is the same as 
in the case of PSp2„((7) which is l/2n. Therefore a crude estimate in this case 
follows from an estimate in fJInl?)- 
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Assume that G = Fi{q). If we have an involution i of type t^, then Ccii)" — 
Sping((7) and the estimate for constructing a long root SL2(g)-subgroup follows 
from the estimate for r2g(g). An involution of type ^4 belongs to a torus T, 
where T corresponds to an element w G W with |Cvi/(w)| = 8 [501 Table 4]. 

Let G = Es{q) or Er{q). Then the semisimple socles of the centralizcrs of 
involutions are either central products of classical groups or contain Ej{q) or 
Ee{q), respectively. In the case of central products of classical groups, we refer 
to the above estimates. Similarly, we reduce the estimates for the groups EY{q) 
to the estimates in E^^q). The estimates for the groups EQ{q) and ^EQ{q) can 
be computed again from the estimates for classical groups as the semisimple 
socles of the centralizcrs of involutions are central products of classical groups, 
see Table m 

Recall that the construction of a long root SL2((;)-subgroup in G2{q) and 
^1^4 (q) is not a recursive procedure and it can be constructed without any 
difficulty by the routine presented in Section fB. 3. II 

8 Recognition of the p-core 

The aim of this section is to prove Theorem 11.31 The algorithm is primarily 
focused on the construction of the centralizcrs of classical involutions. We use 
the function to generate the centralizcrs of classical involutions. Therefore 
it is enough to obtain a lower bound for the probability that ii^ has odd order 
only for classical involutions i ^ G. 

Theorem 8.1 Let G he a finite simple classical group over a field of odd char- 
acteristic p and i ^ G he a classical involution. Then the product ii^ has odd 
order with probability bounded from below by a constant which does not depend 
on G. 

Proof. Let i e G be a classical involution. Then it belongs to some long root 
SL2 (g)-subgroup K ^ G. Therefore, the product ii^ belongs to the subgroup 
L = {K, K^). We have shown in Section[3]that the subgroup L has a given struc- 
ture depending on G with probability at least 1 — 0{l/q). Hence, it is enough 
to find the probability that a product of two conjugate classical involutions in 
L has odd order. 
Consider the map 

(f-.i^xi^ L 

Take a torus T ^ L inverted by j = i^ for some g' G L, that is, satisfying 
P ^ t^^ for all t <E T. Let x ^ T he an element of odd order. Then there exists 
h g (x) such that = x. Now 

jh~^jh = hh = X 
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since j inverts T. Hence elements of odd order in T are in the image of ip. Let 
a; £ T be a regular element, that is, Cl{x) = T, which has odd order. Then 
= |T| since = {jj^Y = {hhf = x* a; for any t e T. Let S be 

the set of regular elements in T which are of odd order. Let R be the set of all 
regular elements in L whose elements are conjugate to elements in S, then 

\R\^\L:Nl{T)\\S\. 

Now observe that 

W-\R)\ > \R\\S\, 

and 

Therefore the proportion of pairs of involutions which are mapped to R is 

\^-\R)\ ^ \R\\S\\Cd^\' \S?\Cl{^? 

^ \Nl{T)\\L\ ■ 

Now, we shall find a lower bound for this quotient in all finite simple classical 
groups. 

Let G = PSL„((7), n'^ b. Then by Lemma IXTl L = SL4(g) with probability 
at least 1 — l/g"^'' > 1/2. Observe that a classical involution i G L inverts a 
cyclic torus H ^ L oi order + 1 and {q^ + l)/2 is odd. Observe also that H is 
uniquely contained in a maximal cyclic torus T ^ L of order (g + l){q^ + 1) = 
(g^ — l)/(g — 1). Note that the maximal torus T in L corresponds to a 4- 
cycle in the Weyl group of L which is Sym{A) in this case. Hence, \R\ ~ ^l^^-V) ' 
|5| ^ (g2 + l)/2, - q\q^~\)\q-\) and \L\ = q\q^ -\){q^ -\){q'^^-\). 

After a simple rearrangement 

X ^ 1692(^2 1) ^ 32' 

Hence, ii^ € PSL„(g) is of odd order with probability at least 1/64. If G = 
(P)SL„((7) with n ^ 4, then by Lemma [3.51 L = G with probability at least 
1 — 1/g, and by the same computations we obtain a similar result. 

Let G = PSp2„(<?), n ^ 3. Then L = Sp4((7) with probability at least 
1 — l/g^"^^ > 1/2 by Lemma [3.21 The classical involutions invert a tori of 
order q ± 1. Let T ^ i be a torus of order q — 1 inverted by a classical 
involution i E L and q = — l(mod4). Then {q — l)/2 is odd. Observe that 
CUT) = GL2((/), \NL{T)/CLiT)\ = 2 and GL{i) = SLzlg) x SL2(g). Now after 
a simple rearrangement, we have 

xiL\ -"4 g(g2 + l) / ■ 

Hence, ii^ G PSp2„((i') is of odd order with probability at least 1/32. If q = 
1 (mod 4), then we consider tori of order q+l. If G = PSp4((7), then by Lemma 
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13. 5[ L = G with probability at least 1 — 1/q and by the same arguments we 
obtain a similar result. 

Let G = f2^(g), then L — G with probability at least 1 — 1/q > 1/2 by 
Lemma 13.51 Observe that a classical involution i G G inverts a maximal torus 
T of order (q" + l)/2 which is odd. Now, \CG{i)\ ^ ^q'^ {q - 1)^ (q + if {q^ + 1) , 
\S\ = {q^ + l)/2, \Ng{T)/T\ = 12. Hence, 

W-\R)\ > 1 {q-l)\q+l)\q^ + l) ^ ^_ ^ J_ 
\i^xi^\^iM q^{q^-l) •" 4-384 1536' 

Hence, ii^ G i^g (q) is of odd order with probability at least 1/(2 • 1536). 

Assume now that G = ^^8^(9) or n ^ 9. Then L = ^td) with 

probability at least 1 — 1/q > 1/2 by Lemma 13.31 and 13.51 Observe that L 
contains a subgroup of the form N = ^^4(9) x (9), and there is an involution 
i G ^^4 (9) which inverts a torus of order {q^ + l)/2 in Q,1{q). Notice that i is 
necessarily an involution of type ti in L. Now the involution j = G N 

inverts a torus T of order (g^ + 1)^/4 which is odd. Since j is a product of 
two commuting involutions of type ii, it is of type ^2 in L and therefore it is a 
classical involution. Hence, 

|5| = (g2 + 1)2/4, 

\Cdi)\^mt{<l)?^<f{<l-^nq + l)\ 
\L\=q^\q^-l){q^-l){q*-l){q^-l), 
|iVi(r)| =8(q2 + l)2, 

and 

W-\R)\ q^{q~lf{q + lf{q^ + l)^ 

\iL Xi^l 128(g2 + I)2(ql2(q4 _ l)(^2 _ l)(q4 _ l)(^6 _ 1)) " 

After a simple rearrangement we have 

\^-HR)\ ^ jq'-l)' ^ 1 _ 1 
X i^^l ^ 128q^{q^ - 1) ^ 128 ■ 6 768' 

□ 

The following lemma is crucial for our algorithm. 

Lemma 8.2 Let X be a finite group, i G X an involution and Q ~ Op{X). If 
Gqii) = 1 then [i, a;] G Cx{Q) for all x G X . 

Proof. Notice that if CQ{i) = 1, then i inverts Q, that is, = for any 
X € Q and Q is abelian. It is now easy to see that [i,x] G QGx{Q) = Cx{Q) 
for ah xeX. □ 
First, we present our algorithm in the base case, that is, X/Op{X) = 
PSL2((7). Let « G X be an involution and Q = Op{X) ^ 1. We can assume that 
Cgii) 7^ 1 by Lemma |8 . 2 1 since otherwise random elements in X power up to p- 
elements in Q with high probability. Now Op{Cx{i)) 1 and Cx (i) / Op{Cx (i)) 
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is isomorphic to a dihedral group of order q ± 1. Let Qi = Op{Cx{i))- If 
Op(Cx(j)') = 1; then random elements in Cx(i) have orders which are mul- 
tiples of p and we can find a p-element in Qi by raising a random element in 
Cx{i) to the power g ± 1. Hence, we can assume that Op{Cx{i)') 7^ 1- Now 
Cx{iy /Op{Cx{i)') is isomorphic to a cychc group of order (g ± l)/2 in which 
case we take the power [q ± l)/2 of random elements in Cx{i)' to produce p- 
elements in Op{Cx{i)') and we are done. Our approach in the general case is 
to reduce the problem to this base case in all finite simple classical groups. 

Algorithm 8.3 (cf. [STJ Algorithm 5.8]) "Recognition of the p-cORE" 

Input: A black-box group X with the property that X/Op{X) is a finite 
simple classical group of odd characteristic p. 

Output: Either the statement ''Op{X) ^ 1" together with a non-trivial 
p-element g G Op{X) or the statement "Possibly, the p-core is trivial". 
The answer "Op (A) ^ 1" is always correct whereas the negative answer 
"Possibly, the p-core is trivial" may be false with some probability of error. 

Description of the algorithm: 

1. Check whether random search works in A. 

2. Construct a subgroup A < A where A/Op (A) is a long root SL2(g)- 
subgroup in A/Op(A) and check whether Op(A) ^ 1. 

3. Construct Cx{i) by using Q, and the subgroups Cx{i)' and Cx{i)" where 
i G Z{K). Check whether random search works in these subgroups. 

4. Construct the subgroups A'i,Li where Cxii)" = KiLi and [A'i,Li] = 1. 
Here, Ai /Op (Ai) is a long root SL2((;)-subgroup in A/Op(A). Check if 
Op (Ai) 7^ 1. If Op (Ai) = 1, then go to the next step. 

5. Set X = Li and go to Step 1. 

Step 1: First, we take random elements and check whether they power upto 
p-elements. To do this, we compute the natural number m, where E = mp^, 
{m,p) = 1, is the exponent of X given as an input. We can check whether a p- 
element g & X belongs to the p-core Op (A) in the following way: We construct 
the normal closure P = (ff)^ and then check the solvability of this subgroup. 
By [HI Theorem 1.5], we can construct the normal closure of a subgroup and 
decide the solvability of a given black-box group. Now, if P is not solvable, then 
9 i Op{X). 

In practice, one can check whether a p-element 5 G A belongs to Op (A) in 
the following way. Produce a random element ft, G A and construct the subgroup 
P = {g,g^). If g ^ Op(A), then P is not a p-group with high probability. 

It is proved in [TU] that if X/Op{X) is a finite simple unisingular group of 
Lie type, then random elements power up to a p-element in Op (A) with high 
probability. 

The classification of the finite simple unisingular groups is as follows. 
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Theorem 8.4 ([3T1 Theorem 1.3]) A finite simple group G of Lie type of char- 
acteristic p is unisingular if and only if G is one of the following: 

(i) PSL^(p) with n\{p-e); 

(a) Vt2n+i{p), PSp2„(p) withp odd; 
(Hi) Prj^„(p) withp odd, e = (-l)»(p-i)/2; 

(iv) ^G2iq), Fi{q), '^Fi{q), Es{q) with q arbitrary; 

(v) G2{q) with q odd; 

(vi) Blip) with 3 I (p-e); 
( vii ) Ej {p) with p odd. 

Step 2: We use Algorithm 16. ll to construct a subgroup K where K/Op{K) 
is a long root SL2(g)-subgroup in X/Op{X). In each recursive step in the 
construction of K, we check whether random search works as in Step 1. Note 
that if Cop(x)(*) = Ij where i G X is an involution, then i inverts Op{X) by 
Lemma [8.21 Moreover, the elements of the form [i^x] power up to a p-element 
in Op{X) with high probability. Therefore, before constructing centralizer of an 
involution in each recursive step, we also check whether that involution inverts 
the p-corc of the subgroup constructed in the previous recursion. 

Notice that we may have Op{K) = 1 even though Op{X) ^ 1. We check 
whether Op {K) 7^ 1 as above. If we can not find a p-element then we go to the 
next step. 

Step 3: We use C,\ to construct Cx{i)- The derived subgroups Cx[i)' and 
Cx{i)" can be constructed by an algorithm in [5]. As discussed in Subsection 
I6.1.2[ the map Ci can be used efficiently to generate Cx{i) by Theorems 14.11 and 

If Q 7^ 1 and Cq («) = 1, then by Lemma lOl [i, x] G Cx (Q) for all x G X and 
these elements power up to p-clements in Q with high probability. Therefore we 
assume that Cqii) 7^ 1 which implies that Op{Cx{i)) 7^ 1- If Op{Cx{iy) = 1 or 
Op{Cx(i)") = 1, then again random elements in Cx{i) or Cx(*)' power up to 
p-elements in Q, respectively. Therefore we assume now that Op{Cx{i)") 1 
and go to the next step. 

Step 4: We construct the 2-components Ki and ii of C = Cx{i)"\ compare 
with [371 Section 11] for similar computations. By Theorem 12.11 and Corollary 
[131 C = KiLi, where [Ki,Li] = 1. Here, K^IOp{K{) is a long root SL2(g)- 
subgroup in XlOp{X) and the structure of the subgroup L\ can be read from 
Table m Notice that K i^Kx- 

We consider a maximal twisted torus T ^ L\. Recall that the maximal 
twisted tori arc conjugate in L\ and the probability that a random element 
belongs to a torus conjugate to T is OiXjri) by Equation 

LetX/Op(X) = PSL„(g) andLi/Op(Li) ^ SL„_2(q). Observe that ((q"-^- 
l),q + l) = 2ifnis even, and ((g""^ — l)/((jf — 1), g + 1) = 1 if n is odd. Therefore 
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Table 3: The orders of some maximal twisted tori in Li/Op{Li) [5D], see also 

m §3.i]. 



X/Op{X) 


Li/Op{Li) 


\T\ 


PSL„(<z) 


SL„_2(9) 


[q^-'^ - l)/{q- 1) or g""^ - 1 


PSU„(g) 


SU„_2(<Z) 


(-i)"-')/('z + i) 


PSp2n('7) 


SP2„-2(9) 


(g"-^ + l)/2 




^^2n-3('7) 


(g"-^ + l)/2 






(g"-3 + l)(g+l)/2 




^2n-M 


(g"-^ + l)/2 



we consider tori of order (g"~'^ — 1) or (g"~^ — l)/(g — 1) if n is even or odd, 
respectively. Provided that n ^ 5, the probability that an element in Li having 
an order dividing g"~^ — 1 or (g"~^ — l)/(g — 1) is at least l/(n — 3) or l/(n — 2), 
respectively. Therefore with probability at least l/(n— 2), h = g^/(9+i)° g Ki, 
where E is an exponent for X and a is the biggest power of (g + 1) in E'. If /i 
is a central element in C then we repeat this proces until we find a non-central 
element. If /i G C is a non-central element, then it is clear that {h'~")' = A'l. 

In the rest of the classical groups, except when Li/Op{Li) = SU„_2(g) and 
n is even, we take a torus T as in the third column of Table [3l Observe that 
we have (|T|,g — 1) = 2. If Li/Op{Li) = SU„_2(g) and n is even, then we take 
a torus T of order (g"^^ ^ (^n-a + ^ _ ij ^ 2. Therefore, after 0(n) 

iterations, we can find an element g & C such that h = g^/ii-^) is a non-central 
element in i^i, where h is the maximal power of g — 1 in E. Thus {hP)' — Ki. 

Now we check whether Ki has non-trivial p-core as before. If Op{Ki) ~ 1, 
then we construct Li by raising the power g(g^ — 1) of the elements in the 
generating set for C. If Li is a commuting product of subgroups (P)SL2(g), 
then we use the procedure in Remark 16.91 to construct each (P)SL2(g) in L. 

Step 5: If Op{X) 7^ 1 and Op[Ki) = 1, then Op(Li) ^ 1. Now, we set 
X — Li and go to Step 1. In this way we construct a list of subgroups Kg ^ X, 
s ^ 1, where Kg/ Op{Ks) is centrally isomorphic to PSL2(g) for each s. If we 
fail to construct p-elements in all these subgroups, we conclude that Op(X) = 1. 

9 Implementation 

The algorithms in this paper were tested in GAP4 Version 4.4.10 [17]. The GAP 
code was not written for practical purposes, but checking for the theoretical 
justifications. The author decided not to optimize the programming but to 
check whether each branch of the algorithms worked in practice. Therefore, 
there is a lot room for an improvement of the code for practical purposes. The 
source of the code can be obtained from the author upon request. 

Although we do not calculate the order of an element in our justifications of 
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the algorithms, we use, for simpUcity, the Order function to calculate the order 
of the elements. We use the product replacement algorithm to construct random 
elements in a given group. Instead of using GAP functions DerivedSubgroup 
and NormalClosure in the code, we produce random commutators and random 
conjugates of the generators to generate the derived subgroup and the normal 
closure of a subgroup. 

Although the code is not written for practical purposes, it is worthwhile to 
state the performance of Algorithm 16. II and we present some experiments which 
were carried out on a 2.4 GHz Intel Core 2 Duo processor in Table SI The 
running time is the CPU time in seconds which is avaraged over ten runs. 



Table 4: The implementation of Algorithm 16. II 



G 


Time 


G 


Time 


G 


Time 


SL6(3^) 


1.55 




1.76 


M^) 


7.59 


SL6(3iO) 


4.86 




6.2 




137.25 


SL2o(35) 


13.1 




6.57 


E,{7) 


42.74 


SL2o(3iO) 

SU6(32) 


78.82 




34.25 


E7{7') 


742.67 


1.54 


r!7(53) 


1.86 


Es{7) 


1979.68 


SU6(35) 

SUi6(32) 


3.53 


f^7(5«) 


5.19 


F,{7) 


6.74 


10.35 


^^15(5^) 


5.58 


F4{7') 


100.78 


SUi6(35) 


34.43 


^^15(5^) 


28.3 


'Ee{7) 


12.32 


Spe(35) 


1.52 


f^ro(5') 


2.37 


G2{7) 


1.89 


SP6(3^°) 


4.54 




9.85 


G2(75) 


14.81 


SP2o(3') 


10.37 


f^2"o(5') 


10.25 


^i54(7) 


5.98 



The performance of Algorithm 18.31 depends on the structure of the p-core 
Op{X)^ that is, even if X/Op{X) is not a unisingular group, Algorithm 18.31 
may return a p-element before it constructs a long root SL2(q)-subgroup. For 
example, consider the afhne group G = H t< V, where H = SL„((7) and V is the 
natural module for H. Then the central involution in H inverts every clement of 
V so, in this particular case, Algorithm 18.31 returns a p-elemcnt before it starts 
constructing centralizers of involutions. 

Assume now that X — Gt< H, G ^ SL„(g), q = p*"'. fc ^ 2 and H is a p-group 
where X is given in the following way: 



X 



G H 
G 



Here G is embedded diagonally in SL2„((7) and the matrix entries of G are 
increased by p. It is clear that H = Op{X) and the involutions in X do not 
invert H, that is, Gnii) 7^ 1 for any involution i G X. Assuming that q is 
very large, a p-clcmcnt can not be constructed in one of the recursive steps 
corresponding to Step 2 of Algorithm 18.31 However, in this case. Step 2 of 
Algorithm 18.31 returns a subgroup K where K/Op{K) corresponds to a long 
root SL2((7)-subgroup in X/Op(X) and Op{K) ^ 1. Hence, we construct a p- 
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element in K as described in Section [5] In this case the performance of the 
algorithm is similar to the performance presented in Table |4l 
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